Malicious Package

Overview

This package downloads and executes a python script from http://static.ricterz.me via preinstall, postinstall and install scripts. That script is trying to fetch and execute another script from ricterz.me:8889 which is currently down. The python script from http://static.ricterz.me is saved in shell.py.